Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: 9/R+K1VmzKkDkx38Z3mXwdkf1qwRuE7vzCAUbO4d/KI=
Subject key identifier: 04:40:24:DF:A6:3A:25:30:A2:1E:E7:1B:77:C9:B9:28:4C:51:88:28
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7049AEDCADC0384DFD48EFB2F91AF9353EFD56EE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
Signing time: Wed 19 Aug 2026 03:09:06 +0000
ROA not before: Wed 19 Aug 2026 03:04:06 +0000
ROA not after: Wed 18 Aug 2027 03:09:06 +0000
asID: 204844
IP address blocks: 2a0f:85c1:8b7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:49:ae:dc:ad:c0:38:4d:fd:48:ef:b2:f9:1a:f9:35:3e:fd:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 03:04:06 2026 GMT
Not After : Aug 18 03:09:06 2027 GMT
Subject: CN=044024DFA63A2530A21EE71B77C9B9284C518828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c6:3d:1f:64:08:aa:7d:50:a3:92:5e:04:43:
2d:eb:93:b2:b8:cc:0f:26:29:7e:88:b5:8e:0a:6e:
b6:7f:49:78:3d:69:3b:b7:34:dd:64:0b:0f:01:fc:
f6:4a:a7:15:b5:32:58:b5:0c:8d:d4:6c:1a:83:cc:
4d:87:36:41:ce:dd:11:c2:f9:89:c8:30:19:bb:02:
54:55:92:f1:3d:1b:50:0f:15:d6:be:cd:01:b0:e8:
cc:76:87:95:c8:09:5e:a9:7a:aa:07:14:a7:2c:91:
e6:27:18:8c:05:25:9e:04:80:c4:02:cf:7e:1f:88:
42:7b:6e:d1:c9:78:8b:16:a0:c9:a5:8f:c6:e8:16:
3f:52:f7:17:a7:ec:97:81:dc:e3:2f:c4:d9:53:b9:
1f:39:2e:1e:cc:5e:19:a8:0f:4b:ba:15:4b:9e:d2:
26:03:22:9a:a4:d3:78:4b:ad:56:ba:ec:33:c1:25:
b5:f0:e9:a7:ea:b8:ce:e1:73:d2:ad:58:c2:32:42:
79:ad:e8:d3:78:e1:0c:1b:64:39:37:cc:78:3a:77:
7c:2f:bc:df:5d:60:67:87:77:7c:99:35:8e:35:f5:
2a:55:ea:f2:96:c6:a9:5a:6f:25:87:60:5b:44:bc:
5e:d6:4f:81:b3:e2:8e:06:9f:ee:b4:2b:3e:11:c2:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:24:DF:A6:3A:25:30:A2:1E:E7:1B:77:C9:B9:28:4C:51:88:28
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8b7::/48
Signature Algorithm: sha256WithRSAEncryption
83:dd:84:7a:c0:ef:99:76:5d:2b:62:6e:3e:74:ce:52:f6:f7:
fe:f6:c6:a3:c6:20:af:e3:9c:a3:f5:bb:2f:3f:9d:12:dd:85:
ef:40:a6:9f:32:55:a2:fd:bb:b3:2a:b2:e8:40:59:47:5d:f3:
c2:da:2b:5a:c0:9f:a2:3a:93:6b:d0:b5:96:97:4e:b9:11:69:
58:80:0e:4b:42:1c:b8:7b:78:52:e2:65:be:b2:aa:e0:d8:82:
1d:f4:f6:c2:c5:12:39:f9:84:6b:04:5d:cd:15:7e:e8:fb:14:
3a:15:bb:df:70:ec:33:89:47:63:a7:b1:cf:fb:31:13:90:d7:
e8:b5:7c:08:fe:bb:c2:1d:78:c1:24:a9:e0:5a:aa:41:a2:84:
ff:7e:2b:9f:cb:13:c1:fa:c1:18:58:c9:54:19:15:f1:4a:cd:
f0:2d:3f:0f:29:f5:1f:76:30:5c:5e:9d:c9:45:2c:a7:63:db:
61:30:c1:9c:a3:50:a1:06:b0:51:82:e0:72:0b:1a:a4:4f:2b:
02:46:d9:40:88:22:9c:d6:67:96:04:79:d1:b6:9e:b9:2d:e2:
c3:aa:3b:f8:b9:85:0e:20:da:ff:ec:f2:f5:96:39:fe:03:e8:
bf:f9:16:f3:08:a3:02:2b:78:e4:a2:d6:e2:4a:08:e5:a0:5a:
f9:24:8b:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUcEmu3K3AOE39SO+y+Rr5NT79Vu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA4MTkwMzA0MDZaFw0yNzA4MTgwMzA5MDZaMDMxMTAvBgNV
BAMTKDA0NDAyNERGQTYzQTI1MzBBMjFFRTcxQjc3QzlCOTI4NEM1MTg4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzxj0fZAiqfVCjkl4EQy3rk7K4
zA8mKX6ItY4KbrZ/SXg9aTu3NN1kCw8B/PZKpxW1Mli1DI3UbBqDzE2HNkHO3RHC
+YnIMBm7AlRVkvE9G1APFda+zQGw6Mx2h5XICV6peqoHFKcskeYnGIwFJZ4EgMQC
z34fiEJ7btHJeIsWoMmlj8boFj9S9xen7JeB3OMvxNlTuR85Lh7MXhmoD0u6FUue
0iYDIpqk03hLrVa67DPBJbXw6afquM7hc9KtWMIyQnmt6NN44QwbZDk3zHg6d3wv
vN9dYGeHd3yZNY419SpV6vKWxqlabyWHYFtEvF7WT4Gz4o4Gn+60Kz4Rwr0jAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUBEAk36Y6JTCiHucbd8m5KExRiCgwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA0ODQ0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQi3MA0GCSqGSIb3DQEBCwUAA4IBAQCD3YR6wO+Zdl0rYm4+dM5S9vf+9sajxiCv
45yj9bsvP50S3YXvQKafMlWi/buzKrLoQFlHXfPC2itawJ+iOpNr0LWWl065EWlY
gA5LQhy4e3hS4mW+sqrg2IId9PbCxRI5+YRrBF3NFX7o+xQ6FbvfcOwziUdjp7HP
+zETkNfotXwI/rvCHXjBJKngWqpBooT/fiufyxPB+sEYWMlUGRXxSs3wLT8PKfUf
djBcXp3JRSynY9thMMGco1ChBrBRguByCxqkTysCRtlAiCKc1meWBHnRtp65LeLD
qjv4uYUOINr/7PL1ljn+A+i/+RbzCKMCK3jkotbiSgjloFr5JIsL
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:47 2026 by rpki-client